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Abstract 

Defeasible logic is a rule-based nonmonotonic logic, with both strict and defeasible rules, and a pri- 
ority relation on rules. We show that inference in the propositional form of the logic can be performed 
in linear time. This contrasts markedly with most other propositional nonmonotonic logics, in which 
inference is intractable. 



1 Introduction 

Most work in non-monotonic reasoning has focussed on languages for which propositional 
inference is not tractable. Sceptical default reasoning is IJiJ-hard, even for very simple 
classes of default rules, as is sceptical autoepistemic reasoning and propositional circum- 
scription. The complexity of sceptical inference from logic programs with negation-as- 
failure varies according to the semantics of negation. For both the stable model semantics 
and the Clark completion, sceptical inference is co-NP-hard. See J 1 31 l9i for more details. 

Although such languages are very expressive, and this expressiveness has been exploited 
in answer-set programming J26> . for example, they have not led to any practical applica- 
tions in non-monotonic reasoning. 

There has also been work on more tractable languages. Extensive work on inheritance 
networks with exceptions has led to polynomial time algorithms ( 30 1 and applications ( 25 ). 
Defeasible logic (1271 12 8 1 is a generalization ( 7 ) of inheritance networks with exceptions 
under the directly sceptical semantics ( 17 1. Defeasible logic replaces the implicit specificity 
relation by an explicit, programmable priority relation; generalizes containment statements 
between concepts and their complements to rules over literals; and adds the notion of an 
explicit defeater. Recent work has proposed other languages J 1 5 1 1 1 Oi which are essentially 
subsets of defeasible logic 

We have already established that full first-order defeasible logic has a recursively enu- 
merable inference problem (1221 . In this paper we establish that inference in propositional 
defeasible logic has linear complexity. Considering the several expressive features of de- 



feasible logic, and its low complexity, it appears to be a suitable basis for applications of 
non-mono tonic reasoning that involve very large rule sets. 

In the next section we introduce the proof theory of defeasible logic, which defines the 
logic. Then we present a transition system (for a subset of defeasible logic) that progres- 
sively simplifies a defeasible theory while accumulating conclusions that can be inferred 
from the theory. We show that the meaning of the theory is preserved, and when no more 
transitions are applicable all consequences have been accumulated. 

The following section presents an algorithm that can be viewed as performing a par- 
ticular sequence of transitions. By an appropriate choice of data structures, we show that 
the set of all conclusions can be computed in time linear in the size of the theory. Finally, 
we use the transformations of OJ[l) to map an arbitrary defeasible theory to the subset of 
defeasible logic to which the algorithm applies. These transformations require only linear 
time, and blowup in the size of the theory is linear. Thus the result is a linear time compu- 
tation of the conclusions of the defeasible theory. This algorithm has been the basis of an 
implementation of defeasible logic ( l23t . 

2 Defeasible Logic 

2.1 An Informal Presentation 

We begin by presenting the basic ingredients of defeasible logic. A defeasible theory (a 
knowledge base in defeasible logic, or a defeasible logic program) consists of five different 
kinds of knowledge: facts, strict rules, defeasible rules, defeaters, and a superiority relation. 

Facts are indisputable statements, for example, "Tweety is an emu". Written formally, this 
would be expressed as emu(tweety). 

Strict rules are rules in the classical sense: whenever the premises are indisputable (e.g. 
facts) then so is the conclusion. An example of a strict rule is "Emus are birds". Written 
formally: 

emu(X) — y bird(X). 

Defeasible rules are rules that can be defeated by contrary evidence. An example of such 
a rule is "Birds typically fly"; written formally: 

bird(X) flies(X). 

The idea is that if we know that something is a bird, then we may conclude that it flies, 
unless there is other, not inferior, evidence suggesting that it may not fly. 

Defeaters are rules that cannot be used to draw any conclusions. Their only use is to pre- 
vent some conclusions. In other words, they are used to defeat some defeasible rules by 
producing evidence to the contrary. An example is "If an animal is heavy then it might not 
be able to fly". Formally: 

heavy(X) ->flies(X). 

The main point is that the information that an animal is heavy is not sufficient evidence 
to conclude that it does not fly. It is only evidence that the animal may not be able to fly. 
In other words, we don't wish to conclude -iflies(X) if heavy(X), we simply want to 
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prevent a conclusion flies(X) unless there is more evidence that overrides the heaviness 
ofX. 

The superiority relation among rules is used to define priorities among rules, that is, where 
one rule may override the conclusion of another rule. For example, given the defeasible 
rules 

r : bird(X) flies(X) 

r' : brokenWing(X) =4> ->flies(X) 
which contradict one another, no conclusive decision can be made about whether a bird 
with broken wings can fly. But if we introduce a superiority relation > with r' > r, with 
the intended meaning that r' is strictly stronger than r, then we can indeed conclude that 
the bird cannot fly. 

There are several relevant points to be made about the superiority relation in defeasible 
logic. Notice that a cycle in the superiority relation is counter-intuitive. In the above ex- 
ample, it makes no sense to have both r > r' and r' > r. Consequently, defeasible logic 
requires that the superiority relation is acyclic. 

A second point worth noting is that, in defeasible logic, priorities are local in the follow- 
ing sense: Two rules are considered to be competing with one another exactly when they 
have complementary heads. Thus, since the superiority relation is used to resolve conflicts 
among competing rules, it is only used to compare rules with complementary heads; the 
information r > r' for rules r, r' without complementary heads may be part of the superi- 
ority relation, but has no effect on the proof theory. 

Finally, sets of rules with competing heads work as teams against each other. For exam- 
ple, consider the following rules about mammals 

T\ : monotreme(X) mammal(X) 

ri : hasFur(X) =4> mammal(X) 

r% : laysEggs(X) => ->mammal(X) 

r4 : hasBill(X) => -imammal{X) 

with the following superiority relation: r\ > r$ and > r^. For a platypus, which sat- 
isfies all antecedents, no rule is superior to all competing rules. However, rules r\ and r-i 
together are superior to rules r% and r^. Hence defeasible logic concludes that a platypus 
is a mammal. 

Defeasible logic has some similarities with default logic ( 29 »: both are non-monotonic 
logics that distinguish statements which are unarguable (strict rules/ facts) from statements 
that have lesser force (defeasible rules/defaults). However, there are substantial syntactic 
and semantic differences. 

First, default logic has no notion of priority among rules, nor of a defeater that cannot be 
used to make inferences. On the other hand, default logic permits any logical expression 
as a fact or in a default rule, whereas defeasible logic allows only rules as statements. 
Nevertheless, even if we restrict attention to propositional default theories (W, D) where 
W is a conjunction of literals and D consists of Horn default rules (so that the syntax is 
weaker than defeasible logic), sceptical inference is co-NP-hard (9 1 whereas, as will be 
shown in this paper, defeasible logic has linear complexity. 

As noted by Nute J28i . a central difference between the two logics is in the application of 
rules. In default logic the applicability of a default rule is independent of any other default 
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rule so that, given default rules and J ^ £ , either default may be applied. On the other 
hand, in defeasible logic with rules a, => -ia} neither rule may be applied, since each 
rule "interferes" with - or defeats - the other. 

2.2 Formal Definition 

In this paper we restrict attention to essentially propositional defeasible logic. Rules with 
free variables can be interpreted as rule schemas, that is, as the set of all variable-free 
instances; in such cases we assume that the Herbrand universe is finite and we regard 
variable-free atoms as propositions. For compactness of presentation, we use rule schemas 
in examples. However, in this paper we assume that a theory is presented in propositional 
form, and not with rule schemas. 

We assume that the reader is familiar with the notation and basic notions of propositional 
logic. If q is a literal, ^q denotes the complementary literal (if q is a positive literal p then 
<~<7 is ^p; and if q is ->p, then^q is p). 

A rule r : A(r) C(r) consists of its unique label r, its antecedent (or body) A(r) 
(A(r) may be omitted if it is the empty set) which is a finite set of literals, an arrow 
(which is a placeholder for concrete arrows to be introduced in a moment), and its 
consequent (or head) C(r) which is a literal. In writing rules we omit set notation for 
antecedents and sometimes we omit the label when it is not relevant for the context. There 
are three kinds of rules, each represented by a different arrow. Strict rules use — defeasible 
rules use =>, and defeaters use 

Given a set R of rules, we denote the set of all strict rules in R by R s , the set of strict and 
defeasible rules in R by R s d, the set of defeasible rules in R by Rd, the set of defeasible 
rules and defeaters in R by Rdd, and the set of defeaters in R by R d ft- R[q] denotes the set 
of rules in R with consequent q. 

A superiority relation on R is a relation > on R. When n > r 2 , then n is called 
superior to r 2 , and r 2 inferior to r\. Intuitively, n > r 2 expresses that r\ overrules r 2 , 
should both rules be applicable. We assume > to be acyclic (that is, the transitive closure 
of > is irreflexive). 

A defeasible theory D is a triple (F, R, >) where F is a finite set of literals (called/acfs), 
R a finite set of rules, and > an acyclic superiority relation on R. 

Example 1 

We will use the following defeasible theory to demonstrate several aspects of defeasi- 
ble logic. We assume there are only the constants ethel and tweety in the language. Let 

Dbird = {Furd, Rbird, >bird) where: F bird is the set of facts 

emu(ethel) . 
bird(tweety). 



Rbird is represented by the set of rule schemas 






n : 


emu(X) 




bird(X). 


Tl ■ 


bird(X) 


=> 


flies(X). 


r3 ■ 


heavy(X) 




-nflies(X). 


r 4 : 


brokenWing(X) 


=> 


^fUes(X). 


r5 ■ 




=> 


heavy(ethel) 
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and the superiority relation >bird contains only >bird fi- 

The five rule schemas give rise to nine propositional rules by instantiating each variable 
to ethel and tweety respectively. Those rules, which make up Rurd are 



ri. e : emu(ethel) bird(ethel). 

Ti t : emu(tweety) — > bird(tweety). 

r2, e : bird(ethel) =>■ flies(ethel). 

T2,t ■ bird(tweety) => flies (tweety). 

rs^ e : heavy (ethel) ~> ->flies(ethel). 

r3, t : heavy(tweety) ~> ->flies(tweety). 

T4, e : brokenWing(ethel) ->flies(ethel). 

r^ t ■ brokenWing(tweety) =4> -iflies(tweety). 

r$ : =>• heavy(ethel). 



The rules have been re-labelled purely to simplify later reference 1 . As a result, the supe- 
riority relation becomes {r 4je > Wr( J r 2 ,e,^4,e >Urd r 2,t,r^ t >bird »*2,e,»*4, 4 >bird T 2 ,t}- 

As noted in the previous subsection, the two statements r^ e >urd r 2,t and r^t >Urd r 2,e 
have no effect, since they do not involve rules with conflicting heads. 

In this defeasible theory, R s = {ri e , ri t } and Rd[^ flies (tweety)) — {r3,{, r^t}. □ 

2.3 Proof Theory 

Defeasible logic is defined by the proof theory presented in this subsection. There are also 
characterizations of defeasible logic in other frameworks J221 1141 [20 1, but they are not 
needed here. 

A conclusion of I? is a tagged literal that may be proved by D, and can have one of the 
following four forms: 

+Aq which is intended to mean that q is definitely provable in D. 

—Aq which is intended to mean that we have proved that q is not definitely provable in D. 
+dq which is intended to mean that q is defeasibly provable in D. 
—dq which is intended to mean that we have proved that q is not defeasibly provable in 
D. 

Conclusions are used only at the meta-level and do not occur in defeasible theories. 
Notice the distinction between — , which is used only to express unprovability, and ->, 
which expresses classical negation. For example, —A^flies(tweety) means that it has 
been proved that the negated proposition -i flies (tweety) cannot be proved definitely in 
the defeasible theory. 

If we are able to prove q definitely, then q is also defeasibly provable. This is a direct 
consequence of the formal definition below. Similarly, if — dq is concluded then we must 
also conclude — Aq. 

Provability is defined below. It is based on the concept of a derivation (or proof) in 
D = (F, R, >). A derivation is a finite sequence P — (P(l), ■ ■ ■ P(n)) of tagged literals 

1 Without the re-labelling we would have different rules with the same label. This is not a problem, formally, but 
might be confusing. 
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constructed by inference rules. There are four inference rules (corresponding to the four 
kinds of conclusion) that specify how a derivation may be extended. (P(l..i) denotes the 
initial part of the sequence P of length i): 

+A: We may append P(i + 1) = +Aq if either 
q E F or 

3r E R s [q] Va e A(r) : +Aa e P(l.i) 

This means, to prove +Ag we need to establish a proof for q using facts and strict rules 
only. This is a deduction in the classical sense - no proofs for the negation of q need to be 
considered (in contrast to defeasible provability below, where opposing chains of reasoning 
must also be taken into account). From F>urd in Example[T]we can infer +Aemu(ethel) 
(and + Abird(tweety)) immediately, in a proof of length 1. Using r\ te and the second 
clause of the inference rule, we can infer +Abird(ethel) in a proof of length 2. 

—A: We may append P(i + 1) = — Aq if 
q g F and 

Vr e R„[q] 3a <= A(r) : -Aa E P(l.i) 

To prove — Aq, that is, that q is not definitely provable, q must not be a fact. In addition, 
we need to establish that every strict rule with head q is known to be inapplicable. Thus 
for every such rule r there must be at least one element a of the antecedent for which 
we have established that a is not definitely provable (—Aa). From Durd, we can infer 
— Aheavy{tweety) and — A^ flies (tweety) immediately (among many others), since in 
these cases R s [q] is empty. 

Note that this definition of nonprovability does not involve loop detection. Thus if D 
consists of the single rule p — > p, we can see that p cannot be proven, but defeasible logic 
is unable to prove — Ap. 

Defeasible provability requires consideration of chains of reasoning for the complemen- 
tary literal, and possible resolution using the superiority relation. Thus the inference rules 
for defeasible provability are more complicated than those for definite provability. 

+d: We may append P{i + 1) = +dq if either 

(1) +Ag e P(l.i)or 

(2) (2.1) 3r E R sd [q}Va E A(r) : +da E P(l.i) and 

(2.2) -A~g E P(l.i) and 

(2.3) Vs E i?H either 

(2.3.1) 3a E A(s) : -da E P(l..i) or 

(2.3.2) 3t E R s d[q] such that 

Va e A(t) : +da E P(l.i) and t > s 

Let us illustrate this definition. To show that q is provable defeasibly we have two 
choices: (1) We show that q is already definitely provable; or (2) we need to argue us- 
ing the defeasible part of D as well. In particular, we require that there must be a strict 
or defeasible rule with head q which can be applied (2.1). But now we need to consider 
possible "attacks", that is, reasoning chains in support of^g. To be more specific: to prove 
q defeasibly we must show that^g is not definitely provable (2.2). Also (2.3) we must 
consider the set of all rules which are not known to be inapplicable and which have head 
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(note that here we consider defeaters, too, whereas they could not be used to support 
the conclusion q; this is in line with the motivation of defeaters given in subsection 2.1). 
Essentially each such rule s attacks the conclusion q. For q to be provable, each such rule 
s must be counterattacked by a rule t with head q with the following properties: (i) t must 
be applicable at this point, and (ii) t must be stronger than s. Thus each attack on the 
conclusion q must be counterattacked by a stronger rule. 

From Dbird in Example[2we can infer +dbird(ethel) in a proof of length 3, using (1). 
Other applications of this inference rule first require application of the inference rule —d. 
This inference rule completes the definition of the proof theory of defeasible logic. It is a 
strong negation of the inference rule +d ( 2 ). 

—d: We may append P(i + 1) = — dq if 

(1) -Aq G P(l.i) and 

(2) (2.1) Vr G R sd [q] 3a G A{r) : -da G P(l.i) or 

(2.2) +A~g G P(l..i) or 

(2.3) 3s G R\~q] such that 

(2.3.1) Va G A(s) : +da G P(l..i) and 

(2.3.2) V< G R sd [q] either 

3a G A(t) : -da G P(l..«) ori ^ s 

To prove that <? is not defeasibly provable, we must first establish that it is not definitely 
provable. Then we must establish that it cannot be proven using the defeasible part of the 
theory. There are three possibilities to achieve this: either we have established that none of 
the (strict and defeasible) rules with head q can be applied (2. 1); or^q is definitely provable 

(2.2) ; or there must be an applicable rule s with head^q such that no possibly applicable 
rule t with head q is superior to s (2.3). 

From T>bird in ExampleJ^we can infer —dbrokenWing(ethel) with a proof of length 
2 using (1) and (2.1), since R[q] is empty. Employing this conclusion, we can then infer 
—d->flies(ethel), again using (2.1), since the only rule r is r4, e . Using rg, we can infer 
+dheavy(ethel) by (2) of the inference rule +d; (2.3) holds since R\^q] is empty. Using 

(2.3) of the inference rule —d, we can infer —dflies(ethel), where the role of s is taken 
by r 3 , e . 

Furthermore, we can infer —dbrokenWing(tweety) and —dheavy(tweety) using (2.1) 
of inference rule —d, since in both cases R s d [q] is empty. Employing those conclusions, we 
can then infer —d^flies(tweety), again using (2.1), since the only rules for -iflies(tweety) 
involve antecedents already established to be unprovable defeasibly. Now, using this con- 
clusion, we can use (2), specifically (2.1), of the inference rule +d to infer +dflies(tweety). 

The elements of a derivation P in D are called lines of the derivation. We say that a 
tagged literal L is provable in D — (P, R, >), denoted D h L, iff there is a derivation in 
D such that L is a line of P. Equivalently, we say that L is a conclusion (or consequence) 
of D. 

Conclusions are the basis of our notion of equivalent defeasible theories. We say D\ 
and Z?2 are conclusion equivalent (written D\ = Dq) iff D\ and D2 have identical sets of 
consequences, that is, D\ h L iff D2 F L. 

An important property of defeasible logic is that it is coherent, that is, there is no defea- 
sible theory D and literal p such that D h +dp and D F — 9p, or 13 F + Ap and 13 F — Ap 
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(|6j. Put simply, this property says that we cannot establish that a literal is simultaneously 
provable and unprovable. 

Notice that strict rules are used in two different ways. When we try to establish defi- 
nite provability, then strict rules are used as in classical logic: if their bodies are proved 
definitely then their head is proved definitely, regardless of any reasoning chains with the 
opposite conclusion. But strict rules can also be used to show defeasible provability, given 
that some other literals are known to be defeasibly provable. In this case, strict rules are 
used exactly like defeasible rules. For example, a strict rule may have its body proved 
defeasibly, yet it may not fire because there is a rule with the opposite conclusion that is 
not weaker. Furthermore, strict rules are not automatically superior to defeasible rules. In 
this paper, we will choose to duplicate strict rules as defeasible rules, and require definite 
reasoning to use the strict rules (as always), while defeasible reasoning may use only de- 
feasible rules. Because of the above facts, this duplication and separation of rules does not 
modify the consequences. When there is a duplicate defeasible rule for every strict rule in 
a defeasible theory, we say that the theory has duplicated strict rules. 

In this paper we will focus on the subset of defeasible logic that involves no superiority 
statements and no defeaters, which we call basic defeasible logic. For basic defeasible 
logic the inference rules are simplified ( 1 ). We simplify them further by introducing two 
auxiliary tags for literals (+<r and —a) and corresponding inference rules. 

+a: We may append P(i + 1) = +aq if 

3r G R sd [q] Va G A(r) : +da G P(l.i) 

—a: We may append P(i + 1) = —aq if 

Vr G R sd [q] 3a G A(r) : -da G P(l.i) 

These tags (+er, — a) represent the ability/inability to find a tentative reason for the liter- 
als. Essentially, we can prove +aq when there is an argument for q, but we must consider 
all counter-arguments (for ^q) before we can prove +dq. Similarly, we can prove —aq if 
there is not even a tentative reason for q, but there are other ways to conclude — dq. Tagged 
literals involving a, d or A are called extended conclusions. 

With the addition of these tags and inference rules, the inference rules for d are reduced 

to: 

+d: We may append P(i + 1) = +dq if either 
+Aq G P(l.i) or 
{+aq,-A~q,-a~q} C P{l..i) 

—d: We may append P(i + 1) = —dq if 
-Aq G P(l..i) and 
{-aq, +A~g, +a~q} n P(l.i) ^ 

This modified proof system reduces the amount of "work" done in any one proof step 
in comparison with the original inference rules, and is the logical basis for the algorithm. 
However, the algorithm is also based on repeated simplification of the defeasible theory, 
which we describe as a transition system in the next section. 
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3 The Transition System 

The algorithm is defined in terms of a transition system on states. A state is a pair (D, C) of 
a defeasible theory D and a set of extended conclusions C. As the algorithm proceeds, the 
theory D is simplified and conclusions of the theory are accumulated in C. The transitions 
for the positive conclusions are based on forward chaining. The negative conclusions are 
derived by a dual process. 

Definition 1 

There is a transition (A, Ci) => (A+i> Cj+i) only in the following cases: 

1. (A, C) => (Di,Ci U {+Ag, +dq, +crq}) 

if there is a fact q in A or a strict rule in A with head q and empty body 

2. (A, C) =^ (Di,CiU{+aq}) 

if there is a defeasible rule in Di with head g and empty body 

3. (A, Ci) =► (A, Ci U {-Ag}) 

if there is no strict rule in A with head q and no fact q in A 

4. (A,C») =>■ (A:,C,U{-q}) 

if there is no rule in A with head g 

5. (A,C 4 ) =► (A,Qu{+3 g }) 

if +Ag 6 Ci or if {-A~g, -a~q, +aq} C Ci 

6. (A,Ci) =► (A, Ci U {-fig}) 

if — Ag G Ci and either +A~g G Ci or +er~g G C or —erg G Ci. 

7. (A,C)=^((A\W)U{r'},C) 

if r is a strict rule in A with body containing q, r' is r with g deleted, and + Ag G Ci 

8. (A,Ci) ((A\W)U{r'},C) 

if r is a defeasible rule in A with body containing g, r' is r with g deleted, and 
+dq G C 

9. (A,C)=^((A\W),C) 

if r is a strict rule in A with body containing g, and — Ag G Ci 
10. (A,C) =^ ((A\W),C) 

if r is a defeasible rule in A with body containing g, and — dq G Ci 

We write (A, Ci) =^=> if there is no transition (A, Ci) (A+i, Ci+i) except those 
where (A, C) = (A+i, C +i ). 

If (A 0) =>■ • • • => (-D'j C') and C is the subset of C involving only the tags 
+A, —A, +d, and —9, then we say that D derives C. 

We demonstrate the action of the transition system on Aird hi Example^ Transition^ 
applies to each fact and transition|3]applies to all literals except the facts and bird(ethel). 
Similarly, transition |2] applies to heavy(ethel) and transition |4] applies to several literals, 
including all brokenWing literals. These transitions do not modify A; they only accu- 
mulate conclusions in Ci. However, as a result of this accumulation, transitional deletes 
emu(ethel) from ri ie , which then allows transition \l\ to add +dbird(ethel) to Ci, and 
transition |9l deletes n,t. Furthermore, transition |5] applies for emu(ethel), bird(tweety), 
and bird(ethel) by the first condition, and then transition[8]applies to modify r2, e and r2,u 
similarly, transition[6]applies to all brokenWing literals, which then allows r^ e and r^, t 
to be deleted by transition^] Further transitions are possible. 



9 



It is quite clear that, by ignoring defeaters and superiority statements, the transition 
system is incorrect for theories of full defeasible logic. The transition system is also in- 
complete, in general, for theories of basic defeasible logic. For example, from the rules 

a — > b 
=>■ a 

the transition system cannot conclude +ab. But under the assumption that strict rules are 
duplicated as defeasible rules, the transition system is sound and complete, as we now 
show. 

Theorem 1 

Let D be a basic defeasible theory with duplicated strict rules. Suppose (D, 0) => • • • => 
(£>', C) =fr. If c e C then flhc. 

Proof 

Consider a transition (Di, Ci) => (A+i, Cj+i)- We prove, by induction on i, that 

• If c € C i+ i\Ci then D l h c 

• A = A+i 

for every conclusion c. 

The first part is straightforward, since the first six transitions are essentially instances of 
the inference rules of defeasible logic. The remainder of the transitions do not modify Cj. 

For the second part only the last four transitions are relevant. We need to show that, for 
each transition and every proof in Di there is a corresponding proof in £>;+i, and vice 
versa. 

For transition^ 

If a proof p in Di applies the inference rule +A using r, then the inference rule is still 
applicable using r' and p is also a proof in Dj+i- Similarly, if a proof p in Di applies the 
inference rule —A involving r, then p establishes —Ax, for some x in the body of r. x 
cannot be q, since Di h +Aq. Thus pis also a proof in Di + \. 

If a proof p in applies the inference rule +A using r', let p' be a proof in Di of 
+Ag. Then the concatenation of p' and p is a proof in Di. If a proof p in £>;+i applies the 
inference rule — A involving r' , then p is also a proof in 

For transition^ 

Let s be the head of r. If p is a proof in Di containing +as then p is also a proof in £>;+i . If 
p is a proof in A+i containing +crs, let p' be a proof in Di of +9s. Then the concatenation 
of p' and p is a proof in Di. 

If p is a proof in Di containing — as, then there is some literal t in the body of r such 
that Di h — 9<. i cannot be g since, by assumption, Di h +(?<?, and defeasible logic is 
coherent. Thus p is also a proof in Dj+j. If p is a proof in Dj+i containing — crs, then there 
is some literal t in the body of r' such that -D;+i h —dt. We must also have Di h — 9<, 
since the proof in Dj+i cannot use r', which would introduce circularity. Thus p is also a 
proof in Z)j . 

For transition]^ 

If a proof p in applies the inference rule +A it does not use r since Di h — Ag. Thus p 
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is also a proof in Di + i . If a proof p in Di applies the inference rule — A then the inference 
rule also applies in Di+i. Thus p is also a proof in 

If a proof p in Di + i applies the inference rule +A then it is also a proof in Di. If a 
proof p in D^+i applies the inference rule —A let p' be a proof in Di of — Aq. Then the 
concatenation of p' and p is a proof in Di. 

For transition \10\ 

Let s be the head of r. If p is a proof in Di containing —as then p is also a proof in £>;+i . If 
p is a proof in Di + \ containing — as, let p' be a proof in Di of —dq. Then the concatenation 
of p' and p is a proof in Di . 

If p is a proof in Di containing +as, then the proof of +as cannot use r, since Di h 
— dq. Thus p is also a proof in Di+i. If p is a proof in Di + i containing +as, then p is also 
a proof in Dj+i. □ 

It follows from the above proof that the transformed defeasible theories are equivalent. 

Corollary 1 

Let D be a basic defeasible theory with duplicated strict rules. Suppose (13, 0) => • • • => 
(£>', C"). Then L> = D' . 

The transition system is complete: it generates all the conclusions that are inferred by 
defeasible logic. 

Theorem 2 

Let D be a basic defeasible theory with duplicated strict rules. Suppose (D, 0) =$■ ■ ■ ■ 
(D' , C") =^>. For every conclusion c, if D' h c then c £ C". 



Suppose, to obtain a contradiction, that the theorem does not hold, and let c be a conclusion 
of D' that is not in C and has a minimal length proof in D 1 among such conclusions. 

If c is — Aq then every strict rule with head q has a body literal b such that D' h — A6. 
By the assumption, and since the proof for each — Ab must be shorter, — Ab E C. Since no 
more transitions are possible, and considering transition^ there is no strict rule with head 
q. But then, a transition[3]that adds — Aq to C", is possible, contradicting the assumption. 

If c is +Aq then there is a strict rule with head q and D' h +Ab for each body literal 
b. By the assumption, and since the proof for +Ab must be shorter, +Ab e C". Since no 
more transitions are possible, and considering transition Q the body of the rule must be 
empty. But then, considering transition^ +Aq 6 C, contradicting the assumption. 

Similarly, if c is +dq then there must be a defeasible rule for q with an empty body. 
Furthermore, D' h — A ^g, and every defeasible rule for^q contains a body literal b such 
that D' h —96. By the assumption, —96 G C", for each 6, and —A S C". Since no 
more transitions are possible, considering transition Ei| there must be no defeasible rules 
for ^q. Thus — a ~j £ C . Also +crq E C' , since the rule body is empty, and thus the 
transition[5]applies, leading to a contradiction. 

If c is — dq then D' h — Ag, and either every defeasible rule for q contains a body literal 
b such that D' h —db or £>' h +A ^q or and there is a defeasible rule for^g such that for 
all its body literals 6', D' h +96'. By the assumption, and since any of these proofs must be 
shorter than the proof of c, — Aq E C and either every defeasible rule for q contains a body 



Proof 



11 



literal b such that —db G C or +A G C or and there is a defeasible rule for^g such 
that for all its body literals b', +db' 6 C. But then, since no transitions are possible, and 
considering transition [8] and EH either there are no defeasible rules for q or +A ^q G C' 
or there is a defeasible rule foi^q with an empty body. Considering transitions [2] and |4j 
either —erg G C" or +A G C" or +ct G C. Consequently, because of transition^ 
— dq G C", contradicting the original assumption. □ 

Combining the previous two theorems, we can conclude that the transition system com- 
putes exactly the conclusions of the initial defeasible logic program. 

Theorem 3 

Let D be a basic defeasible theory with duplicated strict rules. Suppose D derives C. Then, 
for every conclusion c, 

D h c iff c G C 



4 The Linear Algorithm 

The algorithm consists of two main parts: (1) a series of transformations to produce an 
equivalent basic defeasible theory with duplicated strict rules, and (2) the application of 
transitions from the transition system in a computationally efficient order. These parts will 
be discussed in separate subsections. 



4.1 Transformations 

The input to the algorithm is an arbitrary defeasible theory, but the transition system is 
proved correct only for basic defeasible theories with duplicated strict rules. To bridge this 
gap we must transform the input defeasible theory into the appropriate form. 

In {1} three transformations are used to convert any defeasible theory into an equivalent 
basic defeasible theory. The first places the defeasible theory in a normal form, the second 
eliminates defeaters, and the third reduces the superiority relation to the empty relation. 
Let Basic denote this sequence of transformations. We will use Basic in the inference 
algorithm. 

It is beyond the scope of this paper to present a definition of Basic; for that, the reader 
is referred to t li. However, to give the flavor of the transformations we present one com- 
ponent transformation, elimsup, which empties the superiority relation. It introduces two 
new propositions for each rule, two rules for each superiority statement, and up to four 
rules replacing each original rule. It is defined as follows. 

Definition 2 
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Let I? be a regular defeasible theory with rules R. Let E be the language of D. 



elim_sup(R) = R s U { 



U{ 



U{ 



-im/ + (ri) =>■ inf + (r 2 ), 
->inf~(ri) => m/~(r 2 ) | n > r 2 } 
A(r) =>• -im/+(r), 
->inf + (r) =>■ p, 
-A(r) =>• ->inf~(r), 
-.in/~(r) =>■ p | r G i?d[p]} 
A(r) =>■ -<inf~(r), 
->inf~(r) ^> p | r G -Rd/t[p]} 



For each r, inf + (r) and in/ (r) are new atoms not in E. Furthermore all new atoms are 



Intuitively, the two introduced propositions, inf + (r) and inf~(r), represent that r is 
inferior to a rule in i? s( j (respectively R) that has a defeasibly provable body. If D h 
+ainf + (r) then D 1/ +d^inf + (r) and even when A(r) is proved defeasibly p, the 
consequent of r, cannot be established defeasibly using r because the link between the two 
is broken. 

The transformation to eliminate defeaters is slightly similar to the above transformation; 
two propositions are introduced for every proposition in D and up to three rules are used to 
replace each rule in D. The two propositions - p + and p~ - introduced for each proposition 
p, represent that p (respectively -ip) is not defeated by a defeater. Again, these propositions 
form links between antecedent and consequent, and the effect of a defeater is obtained with 
a defeasible rule that can break such a link. For more details, see {TJ. 

It is clear that these two transformations are profligate in their introduction of proposi- 
tions and generation of rules. Nevertheless, they can be applied in one pass (each) over a 
defeasible theory, and the resulting defeasible theory is, at most, a constant factor larger. 

The following result was proved in ( 1 ), albeit in parts and with slightly different termi- 
nology. 

Theorem 4 (0) 

Let D be a defeasible theory and let E be the language of D. Let D' =Basic(D). 
Then D' is a basic defeasible theory and, for all conclusions c in E, 
D h c iff D' h c. 

Furthermore, D' can be constructed in time linear in the size of D, and the size of D' is 
linear in the size of D. 

We must also ensure that the basic defeasible theory resulting from Basic has duplicated 
strict rules. To guarantee this property we employ the following simple transformation 
DupStrict 2 . 

Definition 3 

2 This duplication is not strictly necessary since an appropriate separation of definite and defeasible reasoning 
is achieved by the transformations of 1 1 1. However, in this context, it is simpler to ensure this property by 
duplication than to argue that it holds of transformations that are not presented here. 



distinct. 
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Let D=(F,R,>). Then DupStrict(D) = (F,R',>) where 



R' = RU {(r : B ^ q) \ (r : B ^ q) e R s } 
It is straightforward to show that DupStrict does not change the conclusions of a theory. 
Proposition 1 

For any defeasible theory D, and any conclusion c, 
D h c iff DupStrict{D) h c 

Proof 

(Sketch) Definite provability is affected only by strict rules and facts. The strict rules in R 
and i?' are essentially the same, and the facts are unchanged. Thus definite provability is 
unchanged by DupStrict. 

In applying the defeasible inference rules, it makes no difference whether a rule is strict 
or defeasible. So h' applied to DupStrict(D) uses effectively the same rules as It also makes 
no difference whwther there is one or several copies of a rule. □ 

4.2 The Algorithm 

In the algorithm, which is presented in Figure ^ P ranges over literals and s ranges over 
conclusions. K and S are sets of conclusions. K accumulates the set of conclusions that 
have been proved and used, while S holds those proven conclusions that have not yet been 
used to establish more conclusions. D is the input defeasible theory. 

To begin the algorithm we reduce D to basic defeasible logic with duplicated strict rules, 
as discussed above. We also initialize the set S, that is, we add to S those conclusions that 
can immediately be established: all facts are definitely true, as are the heads of strict rules 
with empty bodies. The heads of defeasible rules with empty bodies are tentatively true. 
Similarly, those literals with no (strict) rules for them are unprovable (strictly). 

The algorithm proceeds by modifying the rules in the theory. For strict rules, when infer- 
ring positive definite consequences, the algorithm is similar to unit resolution for definite 
clauses in classical logic: when an atom is proved, it can be eliminated from the bodies 
of all other definite clauses. In this case, when a literal is established definitely it can be 
deleted from the body of all rules. Similarly, when it is established that a literal p cannot 
be proved then those strict rules which have pas a pre-condition cannot be used to prove 
the head, and so they can be deleted. When a strict rule has an empty body, then its head is 
definitely provable; when there are no strict rules for a literal, then the literal is unprovable 
definitely. When an atom is proved definitely it is eliminated from both strict and defeasible 
rules; this necessitates extra code for the case when the body of a defeasible rule becomes 
empty. 

When establishing tentative provability, we proceed in exactly the same way as with 
definite provability, except that we restrict attention to defeasible rules. We can conclude 
+<rq precisely when the body of a defeasible rule for q becomes empty, and —aq precisely 
when there are no more defeasible rules for q. 

When establishing defeasible provability, we use the simplified inference rules intro- 
duced at the end of Section |2] Each time a statement such as +ap is inferred by the sys- 
tem the statement is recorded in the data structure for p and we check to see whether 
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D' = {F',R',®)=Basic(D) 
R = DupStrict( R' ) 
initialize S 
K = Q 

while (S^%) 

choose s £ S and delete s from S 
add s to K 
case s of 
+Ap: 

delete all occurrences of p in all rule bodies 

whenever a body of a strict rule with head h becomes empty 

add +Ah to S 

record +Ah, +dh, +ah 

Checklnference( +Ah, S ) 
whenever a body of a defeasible rule with head h becomes empty 

record +ah 

Checklnference( +ah, S ) 

-Ap: 

delete all strict rules where p occurs in the body 

whenever there are no more strict rules for a literal h, and there is no fact h 
add - Ah to 5" 
record — Ah 

Checklnference( —Ah, S ) 

+dp: 

delete all occurrences of p in defeasible rule bodies 
whenever a body with head h becomes empty 
record +ah 

Checklnference( +ah, S ) 

—dp: 

delete all defeasible rules where p occurs in the body 
whenever there are no more defeasible rules for a literal h 
record —ah 

Checklnference( —ah, S ) 

end case 
end while 



Fig. 1. Inference algorithm for defeasible logic 

either of the simplified inference rules for d can be applied. This task is performed by 
Checklnference, which will add either +dp or —dp, if justified, to the set S* 3 . For example, 
Checklnference (+ap, S) will check whether —A^p and —a^p have already been estab- 
lished, so that +dp may be inferred and added to S, and if —A ^p has been established 
will add —d ~p to S. Similarly, Checklnference — Ap, S) will check whether +cr ~p and 
—up, so that +d ^p might be inferred, and will check —ap, + A ^p and +a ^p to decide 
whether —dp might be proved. 

Execution of this algorithm can be understood as execution of the transition system of 

3 Recall that defeasible logic will never infer both +dp and —dp since it is coherent |6j. 
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Section|3] S U K combined with the set of recorded extended conclusions in the algorithm 
corresponds to Ci in the transition system. The deletions in the algorithm correspond to 
transitions0|8l|9j and^| The add statements correspond to transitions^and|3l The record 
statements correspond to transitionsnJElOlG] and|4] These transitions are also reflected in 
the initialization of S. Finally, Checklnference embodies transitions[5]and[6] 

The algorithm corresponds to a restricted form of the transition system where some 
sequences of transitions are disallowed. For example, the first case of Figure ^ requires 
that all transitions [7] and [3] involving p must occur as a block, uninterrupted by any other 
uses of these transitions. Furthermore, the only possible other transitions in the block are 
transitions [2 and |2 when p is the last remaining literal in a rule, and transitions [5] and [5] 
when the recorded information about p triggers them. Note, however, that the algorithm 
does not disallow any transitions; it simply restricts the order in which transitions may 
occur. Thus the soundness and completeness of the transition system extends to soundness 
and completeness of the algorithm. 

The key to an efficient implementation of this algorithm is the data structure used to 
represent the rules. It is exemplified (albeit incompletely) in Figure|2]for the theory 



ri : 
T2 ■ 

ra ■ 



b, c, d 
-<b, d, ->e 
d, ->e 



a 
a 
->a 



Each rule body is represented as a doubly-linked list (horizontal arrows in Figure 0. 
Furthermore, for each literal p there are doubly-linked lists of the occurrences of p in the 
bodies of strict (respectively, defeasible) rules (diagonal arrows). For each literal p, there 
are doubly-linked lists of the strict (respectively, defeasible) rules for p (dashed arrows). 
Each literal occurrence has a link to the record for the rule it occurs in (not shown in 
Figure|2}. As mentioned above, each literal p holds information showing which extended 
conclusions about p have been established, and there is also a link to the corresponding 
data structure for 
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Fig. 2. Data Structure for Rules 



This data structure allows the deletion of literals and rules in time proportional to the 
number of literals deleted. Furthermore, we can detect in constant time whether a literal 
deleted was the only literal in that body, and whether a rule deleted with head h was the 
only strict (defeasible) rule for h. Each literal occurrence is deleted at most once, and the 
test for empty body is made at most once per deletion. Similarly, each rule is deleted at 
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most once, and the test for no more rules is made once per deletion. The cost of a call to 
Checklnference is constant, since all checking relies on data that is immediately available, 
and at most 3 checks are needed per call. Thus the cost of the main part of the algorithm is 
0(N), where N is the number of literal occurrences in D'. 

Furthermore, the initialization of S is supported by the data structure and has cost pro- 
portional to the number of propositions in D'. Note that S can be implemented as a queue 
or a stack, since the only operations on S are to test for emptiness, add an element, or 
choose and delete an element. These operations require only constant time, and the num- 
ber of operations is, in the worst case, proportional to the number of rules in D' . Since 
the initial transformations ( 1 1 that produce D' are linear, the cost of the entire algorithm is 
linear in the size of D. 

Theorem 5 

The consequences of a defeasible theory D can be computed in 0(N) time, where N is 
the number of symbols in D. 

This algorithm, when restricted to positive definite conclusions, is similar to the bottom- 
up linear algorithm for determining satisfiability of Horn clauses of Dowling and Gallier 
J 1 H 1 1 2> . One difference is in the data structures: the Dowling-Gallier algorithm keeps a 
count of the number of atoms in the body of a rule, rather than keep track of the body. 
The latter results in greater memory usage, but allows us to reconstruct the residue of the 
computation: the simplified rules that remain. This residue is useful in understanding the 
behaviour of a theory, and can be useful in some applications of defeasible logic. 

5 Discussion 

There seem to be several inter-related features of defeasible logic that contribute to its 
linear complexity: 

• form of failure 

The form of failure-to-prove exhibited in the proof conditions for —A and —d is 
closely related to Kunen's semantics for logic programs with negation-as-failure 
J22t . This form of failure does not include looping failures, and the propositional 
form is known to have linear complexity. 

• static and local nature of conflict 

When trying to derive +dq or — dq it is sufficient to look at rules for q and^g, 
since ^q is the only literal that conflicts with q. Thus the set of conflicting rules is 
unchanging and readily apparent. In logics where there is no bound on the number 
of conflicting literals and/or the conflicting rules cannot be known a priori (for ex- 
ample, plausible logic ( 8 1) the corresponding inference rules for +d and —d can be 
expected to be more complex. 

• linear cost elimination of superiority relation 

Defeaters can be handled as a variant of defeasible rules using the techniques of Sec- 
tion E| The presence of a superiority relation complicates these techniques greatly, 
although it is clear that there is a linear direct implementation of full defeasible logic 
by imitating the elimination transformation. The elimination of the superiority rela- 
tion is based on a simple syntactic transformation ( 1 ), but a similar transformation 
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has been proposed for other logics H91 that have higher complexity. The success 
of such a simple transformation can be partly attributed to the static nature of the 
superiority relation and the static and local nature of conflicting literals, which do 
not change over the course of evaluation. 

A significant non-factor in the complexity of defeasible logic is the team defeat aspect of 
the logic. This might be expected to create some difficulties since, conceptually, two teams 
of rules are pitted against each other, and this might give rise to combinatorial problems. 
However, reformulating the issue as one of competing/conflicting literals clarifies that there 
is a fixed number of pieces of information that are of interest, and each rule can contribute 
individually. 

We can expect that similar logics, such as the variants discussed in @ and variants 
where strict rules are superior to defeasible rules ( 28 1, also have linear complexity and are 
amenable to the techniques used here, although the details will require careful verification. 
Similarly, well-founded defeasible logic (22 1 can be expected to have quadratic complexity, 
since it employs the well-founded semantics ( 32 ) notion of failure, which has quadratic 
complexity. 



6 Conclusion 

We have shown that propositional defeasible logic has linear complexity. The algorithm 
that we have presented here has been implemented as the system Delores ( 24 1 and has un- 
dergone a preliminary experimental evaluation i23\ . It executes simple, but large, theories 
of basic defeasible logic very quickly. The linear complexity of the algorithm is supported 
empirically. 

However, the transformations used to convert an arbitrary defeasible theory to the ap- 
propriate form for the algorithm of Figure[Oimpose a large constant factor on the cost of 
initializing S. Although the cause has not been pinpointed, it appears to be derived from 
the multiplication of rules and propositions during the transformations. It should be possi- 
ble to improve performance by integrating the transformations of ( 1 1 more tightly and/or 
abandoning the design goal Q of incrementality of the transformations (with respect to 
changes in the original defeasible theory). 

Work is proceeding on improvements to the implementation of defeasible logic and the 
application of similar techniques to implement well-founded defeasible logic. We propose 
to use the implementation to support reasoning about regulations (4 1. 
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